UserSecurityContext.hpp

Go to the documentation of this file.

/*
    Copyright (C) 2014-2016 Leosac
 
    This file is part of Leosac.
 
    Leosac is free software: you can redistribute it and/or modify
    it under the terms of the GNU Affero General Public License as published by
    the Free Software Foundation, either version 3 of the License, or
    (at your option) any later version.
 
    Leosac is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
    GNU Affero General Public License for more details.
 
    You should have received a copy of the GNU Affero General Public License
    along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
 
#pragma once
 
#include "core/SecurityContext.hpp"
#include "core/auth/AuthFwd.hpp"
 
namespace Leosac
{
 
class UserSecurityContext : public SecurityContext
{
  public:
    UserSecurityContext(DBServicePtr dbsrv, Auth::UserId id);
 
    virtual bool check_permission_impl(Action a,
                                       const ActionParam &ap) const override;
 
    bool is_self(Auth::UserId id) const;
 
    Auth::UserId user_id() const;
 
    Auth::UserPtr self() const;
 
  private:
    bool can_read_group(const GroupActionParam &gap) const;
 
    bool can_administrate_group(const GroupActionParam &gap) const;
 
    bool can_read_membership(const MembershipActionParam &map) const;
 
    bool can_read_user(const UserActionParam &uap) const;
 
    bool can_read_user_detail(const UserActionParam &uap) const;
 
    bool can_update_user(const UserActionParam &uap) const;
 
    bool can_create_membership(const MembershipActionParam &map) const;
 
    bool can_delete_membership(const MembershipActionParam &map) const;
 
    bool can_read_credential(const CredentialActionParam &cap) const;
 
    bool can_read_schedule(const ScheduleActionParam &sap) const;
 
    bool can_read_door(const DoorActionParam &dap) const;
 
    bool is_admin() const;
 
    bool is_manager() const;
 
    Auth::UserId user_id_;
};
 
 
class NullSecurityContext : public UserSecurityContext
{
  public:
    NullSecurityContext();
 
    virtual bool check_permission_impl(Action a,
                                       const ActionParam &ap) const override;
};
}